Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: 0xvRMSG79enVJg1fZ8ITdxrFDIKgs8XYPT28m4GW+3I=
Subject key identifier: BB:F2:23:53:1F:1C:3E:14:AF:4C:F6:FB:5C:16:B9:4E:B7:91:3E:21
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 01976A05F03A77D5860179EE0C20F479FC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 1441
Signing time: Fri 13 Jun 2025 16:01:03 +0000
Manifest this update: Fri 13 Jun 2025 16:01:03 +0000
Manifest next update: Sat 14 Jun 2025 16:01:03 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: 0P3Z55QWQ5f0JzSI+Sf2P3yu2p2jCzd5ATP6NnnaI8k=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:f0:3a:77:d5:86:01:79:ee:0c:20:f4:79:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jun 13 16:01:03 2025 GMT
Not After : Jun 14 16:01:03 2025 GMT
Subject: CN=bbf223531f1c3e14af4cf6fb5c16b94eb7913e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:5f:0d:88:5e:8f:37:27:ac:f3:51:8b:f0:
06:6c:39:df:e1:7b:26:cc:ed:d5:ac:68:84:e1:01:
ee:6f:f8:9b:87:8d:91:c7:ee:b3:f9:88:93:29:a2:
60:8e:2c:32:59:cf:4a:9d:f8:1b:8a:df:88:77:d1:
80:f8:0c:4a:5b:b6:ab:9b:84:12:2f:e2:b1:11:11:
71:a4:dc:d1:a2:8d:97:89:a7:7c:8f:31:40:6e:2c:
20:b4:18:12:10:b5:85:81:54:31:a0:58:1f:10:b7:
0b:54:3f:12:f1:1e:0a:1a:d3:20:03:e2:ba:4b:97:
45:a0:36:fd:bd:7c:a8:13:20:f4:88:16:33:e1:70:
23:61:22:d7:62:e6:cd:68:67:4f:7d:3e:80:c9:6d:
5a:9a:38:f8:8a:10:ff:5c:86:3b:ce:0b:36:49:d8:
24:87:e6:59:e1:0f:c2:b0:b1:31:bf:23:64:b7:e7:
60:33:07:0b:01:d4:0f:4a:b9:86:e4:1b:6b:49:07:
9e:d5:22:ff:e3:21:8b:d7:65:79:0c:a1:ea:c3:5d:
4c:c9:a6:53:95:ab:03:bb:30:d1:d9:9c:60:ef:c7:
a3:65:d3:26:0e:52:02:72:ff:43:44:f0:4f:5e:d5:
f5:98:7f:95:dd:bd:c0:26:48:6c:bc:44:7e:de:e5:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:23:53:1F:1C:3E:14:AF:4C:F6:FB:5C:16:B9:4E:B7:91:3E:21
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:b1:19:51:7e:ce:c4:8c:69:d4:3e:71:61:5a:93:7d:bb:
6a:8d:91:1d:c4:6b:a3:7d:03:94:fa:aa:0c:d4:bb:90:e3:47:
2f:b8:86:b3:8e:8c:e2:ee:01:cf:6d:fd:d0:e7:c1:e5:cd:f0:
b0:a7:00:6e:ca:ae:8c:b8:5d:28:6b:c0:53:75:0a:55:f0:71:
aa:b4:ae:07:42:f5:fe:9d:94:e7:c7:01:60:5b:76:1f:ea:44:
c2:96:29:20:97:59:8d:ac:b9:67:c7:ab:40:cd:34:e2:ec:1c:
4b:0f:90:17:5c:4b:ab:08:fc:fe:de:75:f3:4d:8f:36:5f:34:
88:be:54:94:64:35:65:fb:e4:57:88:2b:1c:cd:01:a6:95:10:
e3:13:58:ab:3f:2b:2c:05:64:51:e8:e9:64:4d:f0:ff:2c:06:
a6:f8:32:94:9f:d6:77:fb:55:61:8a:ec:f7:7b:f8:41:4f:3f:
87:ab:02:99:ef:79:b6:43:2a:f6:97:9a:5c:44:6a:fa:7e:76:
65:f0:08:ba:86:83:5a:32:2a:54:7f:5b:c4:b1:39:09:3d:e3:
63:aa:51:63:0c:e0:66:0a:47:a3:33:ff:9d:ed:b5:17:87:0c:
50:0a:e2:3a:69:35:1a:4b:f7:88:fa:9a:8d:90:03:f5:83:50:
70:c5:46:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBfA6d9WGAXnuDCD0efyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjUwNjEzMTYwMTAzWhcNMjUwNjE0MTYwMTAzWjAzMTEwLwYDVQQD
EyhiYmYyMjM1MzFmMWMzZTE0YWY0Y2Y2ZmI1YzE2Yjk0ZWI3OTEzZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG9fDYhejzcnrPNRi/AGbDnf4Xsm
zO3VrGiE4QHub/ibh42Rx+6z+YiTKaJgjiwyWc9Knfgbit+Id9GA+AxKW7arm4QS
L+KxERFxpNzRoo2Xiad8jzFAbiwgtBgSELWFgVQxoFgfELcLVD8S8R4KGtMgA+K6
S5dFoDb9vXyoEyD0iBYz4XAjYSLXYubNaGdPfT6AyW1amjj4ihD/XIY7zgs2Sdgk
h+ZZ4Q/CsLExvyNkt+dgMwcLAdQPSrmG5BtrSQee1SL/4yGL12V5DKHqw11MyaZT
lasDuzDR2Zxg78ejZdMmDlICcv9DRPBPXtX1mH+V3b3AJkhsvER+3uXH6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvyI1MfHD4Ur0z2+1wWuU63kT4hMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEimxGVF+
zsSMadQ+cWFak327ao2RHcRro30DlPqqDNS7kONHL7iGs46M4u4Bz2390OfB5c3w
sKcAbsqujLhdKGvAU3UKVfBxqrSuB0L1/p2U58cBYFt2H+pEwpYpIJdZjay5Z8er
QM004uwcSw+QF1xLqwj8/t51802PNl80iL5UlGQ1ZfvkV4grHM0BppUQ4xNYqz8r
LAVkUejpZE3w/ywGpvgylJ/Wd/tVYYrs93v4QU8/h6sCme95tkMq9peaXERq+n52
ZfAIuoaDWjIqVH9bxLE5CT3jY6pRYwzgZgpHozP/ne21F4cMUAriOmk1Gkv3iPqa
jZAD9YNQcMVG/A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:41 2025 by rpki-client